This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json) Hash identifier: Mx+N3ABXCxRKjsZ5puhHvkINk5u+XH01XMb/YSF/XlU= Subject key identifier: 08:3C:9D:51:AD:95:BE:85:62:CD:4E:36:53:1E:38:15:50:35:8B:72 Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Certificate serial: 019BF574D19D2A622D5DBFE6E2443F2C7DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft Manifest number: 0BD9 Signing time: Sun 25 Jan 2026 14:00:32 +0000 Manifest this update: Sun 25 Jan 2026 14:00:32 +0000 Manifest next update: Mon 26 Jan 2026 14:00:32 +0000 Files and hashes: 1: OrnUiGaAfgoX-LuOUbvnk6uPbH4.roa (hash: vcOnRHWoru5B6kfcxHP5t0EEOsXRGZHYwZLGuEiEtsg=) 2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: knR+lzwyI9dnihag1NLsShHD/d5rhX7g/rpbAjVxYys=) 3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:d1:9d:2a:62:2d:5d:bf:e6:e2:44:3f:2c:7d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Validity Not Before: Jan 25 14:00:32 2026 GMT Not After : Jan 26 14:00:32 2026 GMT Subject: CN=083c9d51ad95be8562cd4e36531e381550358b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:bf:ba:c4:7c:d9:cf:82:9c:46:79:cc:26: fb:10:d2:f0:9b:63:19:f0:6d:0d:42:29:99:91:44: 18:76:4b:7c:74:c6:9e:0d:64:99:ea:f7:a3:82:91: 48:02:58:32:dc:6a:a2:8e:47:70:b5:aa:e1:8a:3d: 97:bf:1c:8e:3f:81:72:fe:a5:7e:b5:80:85:87:23: 33:69:03:17:c8:01:e9:21:20:ad:b1:21:37:2a:b8: a2:41:2a:29:13:63:dc:c9:c2:42:22:42:28:b9:e7: 5f:36:14:4b:88:4b:5c:3c:40:a8:17:9b:23:e4:b3: 7b:58:0c:8c:e0:db:6a:d9:12:34:85:38:54:47:e6: cc:76:6d:23:bf:1c:69:1c:e2:e2:68:56:7a:6e:4c: 6b:75:b2:74:dc:2b:cc:78:e7:7d:7b:88:76:d8:61: f4:ad:f1:98:80:8e:fd:8b:36:5c:6b:36:41:72:d5: 36:28:3c:37:02:2a:68:d2:56:2b:f3:68:d4:63:cc: ed:67:67:f3:6d:a4:c0:a9:80:97:f9:3b:d3:38:3d: cf:0d:43:0f:42:eb:03:f5:3e:28:e0:e8:64:9a:d5: c4:92:68:23:68:33:16:e6:38:a9:5f:c2:da:87:f7: ca:19:57:ea:87:48:31:dc:89:8c:24:40:a4:1e:be: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:9D:51:AD:95:BE:85:62:CD:4E:36:53:1E:38:15:50:35:8B:72 X509v3 Authority Key Identifier: keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:8a:c7:ed:f6:79:4c:b8:99:ba:69:18:37:c7:a6:d1:25: df:52:7e:72:44:7c:b0:c0:ef:fa:8c:f8:aa:14:f7:91:4e:d7: 35:dc:16:9c:1c:f0:fa:b8:92:0b:12:b7:71:6d:d6:d3:a9:98: c3:e3:99:06:e5:84:93:da:11:88:0c:3d:59:e1:90:e3:20:14: d4:ed:0b:a1:3e:d7:39:fb:52:b3:76:33:4d:6c:bd:05:72:77: ce:6b:9a:5e:ac:8f:70:c7:75:f6:dd:74:fb:a0:bd:23:5b:3c: 25:aa:2d:b5:40:42:b8:5c:85:85:58:24:c4:da:37:c5:63:8a: 9e:ab:f3:ea:cf:ae:ac:07:78:63:71:5f:b9:3b:6e:cc:ab:66: c7:a2:53:7f:0a:cf:96:09:95:da:57:df:61:4d:d5:92:51:0d: 48:e6:ca:57:17:35:90:14:22:24:70:07:2a:2a:a9:67:2b:58: ac:4d:a4:e1:03:a1:47:cc:d7:fe:d6:bb:7d:bb:c4:13:9e:f1: ab:ed:6d:68:5c:b0:fc:98:b9:3e:23:f1:66:0b:b3:7a:84:2f: 45:c2:a2:25:f7:a1:4d:8a:f4:a1:74:03:48:ac:66:00:9f:b0: 30:10:d8:b0:be:70:2f:db:c6:82:06:f9:b1:98:38:6c:9a:fc: 63:91:81:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNGdKmItXb/m4kQ/LH3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey YTk3NjUwHhcNMjYwMTI1MTQwMDMyWhcNMjYwMTI2MTQwMDMyWjAzMTEwLwYDVQQD EygwODNjOWQ1MWFkOTViZTg1NjJjZDRlMzY1MzFlMzgxNTUwMzU4YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS6/usR82c+CnEZ5zCb7ENLwm2MZ 8G0NQimZkUQYdkt8dMaeDWSZ6vejgpFIAlgy3Gqijkdwtarhij2XvxyOP4Fy/qV+ tYCFhyMzaQMXyAHpISCtsSE3KriiQSopE2PcycJCIkIouedfNhRLiEtcPECoF5sj 5LN7WAyM4Ntq2RI0hThUR+bMdm0jvxxpHOLiaFZ6bkxrdbJ03CvMeOd9e4h22GH0 rfGYgI79izZcazZBctU2KDw3Aipo0lYr82jUY8ztZ2fzbaTAqYCX+TvTOD3PDUMP QusD9T4o4OhkmtXEkmgjaDMW5jipX8Lah/fKGVfqh0gx3ImMJECkHr707wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg8nVGtlb6FYs1ONlMeOBVQNYtyMB8GA1UdIwQY MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt ZDAwMDNhNmI1MjI0LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0 LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMqKx+32 eUy4mbppGDfHptEl31J+ckR8sMDv+oz4qhT3kU7XNdwWnBzw+riSCxK3cW3W06mY w+OZBuWEk9oRiAw9WeGQ4yAU1O0LoT7XOftSs3YzTWy9BXJ3zmuaXqyPcMd19t10 +6C9I1s8JaottUBCuFyFhVgkxNo3xWOKnqvz6s+urAd4Y3FfuTtuzKtmx6JTfwrP lgmV2lffYU3VklENSObKVxc1kBQiJHAHKiqpZytYrE2k4QOhR8zX/ta7fbvEE57x q+1taFyw/Ji5PiPxZguzeoQvRcKiJfehTYr0oXQDSKxmAJ+wMBDYsL5wL9vGggb5 sZg4bJr8Y5GBiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:55 2026 by rpki-client